Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9c276d513c05387c2ed4127480a43d99fb3cb723.roa
File:                     9c276d513c05387c2ed4127480a43d99fb3cb723.roa (raw, json)
Hash identifier:          i7BY2flc4KOKV2vMxldZt1makOHohli0xYD3k//l+l4=
Subject key identifier:   0B:C6:79:3D:49:27:53:7D:40:1F:C8:4A:6D:2D:23:24:E9:4B:B8:0C
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F761F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9c276d513c05387c2ed4127480a43d99fb3cb723.roa
Signing time:             Tue 17 Jan 2023 23:32:11 +0000
ROA not before:           Mon 16 Jan 2023 23:30:06 +0000
ROA not after:            Fri 17 Jan 2025 23:30:06 +0000
asID:                     262589
IP address blocks:        179.1.0.0/17 maxlen: 17
                          179.1.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061855 (0x1f761f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Jan 16 23:30:06 2023 GMT
            Not After : Jan 17 23:30:06 2025 GMT
        Subject: CN=9c276d513c05387c2ed4127480a43d99fb3cb723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:f7:61:86:5b:5e:ef:3a:48:44:59:36:19:
                    cf:cc:3e:b0:ac:cf:31:d9:c3:cf:af:cf:e6:f3:e8:
                    36:62:3d:ee:1d:9a:6e:98:05:1a:d2:10:be:95:26:
                    79:9c:4f:70:71:36:f3:33:51:e9:8b:03:9f:32:c8:
                    0a:72:a6:62:b5:f3:ef:ed:af:72:5d:f5:86:f4:7b:
                    e7:d7:39:20:11:5e:9e:f1:08:ac:92:a3:b3:e2:d7:
                    80:82:f2:20:68:e8:dc:15:43:41:84:7c:f9:3a:82:
                    2d:ef:df:f2:fb:1f:84:de:9a:cb:82:54:7c:d2:ff:
                    84:74:c1:2c:80:4e:1d:0d:86:b4:d0:7f:b4:de:75:
                    69:f5:85:8c:cd:6b:45:55:0a:a5:85:7c:e6:0c:bf:
                    14:d9:f7:ca:63:17:7e:21:b1:6e:7a:b6:4b:2d:49:
                    29:68:37:28:60:2f:c1:e1:50:d4:8c:1b:59:35:ba:
                    af:98:d0:20:8b:f8:61:40:88:83:1c:2e:40:60:e8:
                    fd:dd:65:79:11:5a:db:80:47:28:55:79:97:1c:44:
                    ac:f7:42:ee:a8:e9:e6:03:ee:10:c4:c0:12:92:6d:
                    1d:0d:77:c1:2b:8b:02:cf:9c:34:51:c2:d1:f0:77:
                    3d:89:2b:39:eb:02:4a:f9:25:cc:6c:94:2c:f3:25:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C6:79:3D:49:27:53:7D:40:1F:C8:4A:6D:2D:23:24:E9:4B:B8:0C
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9c276d513c05387c2ed4127480a43d99fb3cb723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/17
                  179.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:60:f2:3a:7d:42:28:24:58:c7:15:1e:db:34:ba:85:38:
         8d:fe:20:5c:18:1f:2a:c2:bd:b7:2b:64:07:d2:d1:52:7a:fc:
         90:28:40:00:20:2b:6a:19:15:0e:31:4d:45:7a:9f:a7:dc:8d:
         21:ac:e7:77:5e:14:b0:0a:28:7d:68:69:f3:c2:b3:1e:e8:98:
         a8:e7:10:f0:50:48:0d:13:c7:c1:0b:26:05:a5:e0:ef:f1:ef:
         9c:89:1d:55:a1:fb:00:b3:ee:8e:77:b7:fd:77:73:e5:3b:e8:
         01:31:6e:5f:d1:02:b7:10:64:f2:5c:1b:ec:20:b1:d5:be:dc:
         04:60:9d:7c:9f:83:9d:a7:38:98:73:c6:58:65:3f:87:84:d9:
         19:76:69:a7:68:8b:9d:74:67:a4:94:a4:1d:c3:71:91:9c:c1:
         5a:61:9d:1e:90:b0:eb:d4:f4:25:a2:80:ae:1a:be:e3:4b:cd:
         5a:90:94:ec:6c:db:66:6c:05:4d:b1:97:c0:de:c9:de:c7:ef:
         bf:c8:7c:f8:36:08:9d:fa:1e:c0:96:19:f2:c8:17:f7:7c:43:
         4b:d1:86:ab:a1:7c:39:2b:11:bb:64:56:41:55:17:dd:eb:4d:
         40:af:e2:df:5c:3d:4d:c0:a0:44:a5:09:28:2e:de:97:f8:05:
         04:fe:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org